Description
Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Cesar Cerrudo · textremotewindows
https://www.exploit-db.com/exploits/21650
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038
Scores
EPSS
0.0907
EPSS Percentile
92.7%
Details
Status
published
Products (2)
microsoft/data_engine
2000
microsoft/sql_server
2000
Published
Aug 12, 2002
Tracked Since
Feb 18, 2026